Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf0cc66-07fb-3c48-9759-7afe05094244.roa
File:                     2cf0cc66-07fb-3c48-9759-7afe05094244.roa (raw, json)
Hash identifier:          MmiwVaITY49KSlbOea9eZ400v8vLB6JyH8IzDvgfUA8=
Subject key identifier:   90:50:A3:1A:68:C7:C8:1D:72:4B:90:13:E4:07:4B:FA:32:E8:E1:02
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD46C9A30106529C8083C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf0cc66-07fb-3c48-9759-7afe05094244.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        174.50.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:46:c9:a3:01:06:52:9c:80:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=c1460810-c2d3-4388-bfee-56dc98726251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:2f:13:15:66:48:0b:67:fc:96:e3:dc:27:
                    02:d4:3e:5b:e7:8c:6f:13:43:ad:d1:ce:f5:7c:48:
                    fb:fb:07:50:a1:01:c1:12:f9:97:80:f3:f4:a7:7f:
                    ff:93:52:56:9b:19:f0:82:96:8a:f1:56:76:0a:9a:
                    9e:5d:22:ab:de:1e:cb:8f:71:e4:c0:16:f8:24:85:
                    a0:b6:26:a4:0b:ea:b7:bd:4a:cd:68:f7:9b:c5:ef:
                    26:51:5f:38:18:e2:17:26:3a:c8:6a:f7:17:67:3d:
                    47:b3:1b:ec:14:0c:fd:69:a1:d8:9e:c7:93:28:ec:
                    a6:80:3a:f4:71:d8:36:38:c6:20:e3:1a:e4:29:38:
                    64:c4:bd:5f:a4:53:52:82:f3:ff:6c:eb:6d:20:3d:
                    15:a8:f5:69:d5:ef:80:e5:b5:80:74:20:2d:ec:4e:
                    11:e9:ae:bf:a8:0e:78:fc:3b:7f:b7:10:7b:89:e9:
                    94:b3:f8:ae:12:12:39:90:1e:c6:16:c4:ab:2e:df:
                    10:2c:64:0b:82:ef:b3:9f:f2:db:78:96:8c:53:66:
                    d5:07:a3:c1:88:16:62:f8:52:5c:08:8a:ca:16:5a:
                    b1:d7:c7:d5:ec:6b:10:6a:e8:45:12:17:1d:c9:69:
                    bf:c4:05:68:24:aa:b4:e9:20:91:80:d9:41:c7:f5:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:A3:1A:68:C7:C8:1D:72:4B:90:13:E4:07:4B:FA:32:E8:E1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf0cc66-07fb-3c48-9759-7afe05094244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:6a:97:d3:c8:26:59:5c:d8:a2:28:3c:3a:ae:07:5c:a1:
         d9:2a:86:01:da:1e:e3:b0:54:d7:3e:55:42:5e:05:b0:0f:ab:
         5d:ba:1e:47:5c:ef:a6:b2:38:0d:2f:45:84:9d:0f:92:81:91:
         83:09:6f:3c:84:c0:0a:47:0b:f0:c2:ca:3c:a1:f9:55:53:19:
         ea:72:a1:ec:54:70:7e:5d:b6:9d:05:6d:d5:f7:06:4f:5d:3a:
         71:ee:8a:ce:0a:4d:54:25:81:2f:25:ce:6f:ef:b6:95:bd:b2:
         90:95:f9:d1:87:40:20:47:35:84:e8:53:9c:d9:53:08:64:24:
         f2:66:c5:fd:19:71:ca:bf:7e:6a:b8:a5:14:75:56:2a:75:26:
         cf:6f:35:8f:46:df:d2:c7:b1:d7:f4:f4:37:51:cb:d5:f9:d4:
         29:0e:29:f9:5f:a7:99:68:57:10:3b:14:60:c5:f4:17:54:57:
         61:ec:db:c8:61:1e:80:8e:c4:14:01:10:88:e8:03:b2:f9:8a:
         c9:92:90:5d:88:02:04:26:47:4c:bf:fd:1d:dc:7a:a8:25:55:
         bb:db:5f:e6:b0:d7:0e:be:68:c2:96:01:b9:8d:fc:22:d3:93:
         db:ff:02:49:84:10:b1:59:fd:76:70:10:85:21:c2:d0:f3:34:
         08:d2:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:37:24 2025 by rpki-client